← ExploitWatch
HomeExploited Vulnerabilities

CVE-2026-24858 — Actively Exploited: Multiple Products (Fortinet)

Fortinet FortiAnalyzer, FortiManager, FortiOS, and FortiProxy contain an authentication bypass using an alternate path or channel that could allow an attacker with a FortiCloud account and a registered device to log into other devices registered to other accounts, if FortiCloud SSO authentication is enabled on those de

CVE IDCVE-2026-24858
VendorFortinet
ProductMultiple Products
Vulnerability nameFortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
Date added2026-01-27
Remediation due2026-01-30
Known ransomware useUnknown
Required actionApply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
DescriptionFortinet FortiAnalyzer, FortiManager, FortiOS, and FortiProxy contain an authentication bypass using an alternate path or channel that could allow an attacker with a FortiCloud account and a registered device to log into other devices registered to other accounts, if FortiCloud SSO authentication is enabled on those devices.
SourceCISA Known Exploited Vulnerabilities

🔍 Search all exploited vulnerabilities →